public_git/kaniko
1
0
Fork 0
mirror of https://github.com/GoogleContainerTools/kaniko synced 2026-10-17 21:11:54 +02:00
Code Issues Releases Wiki Activity

Release 1.5.2 with signed kaniko images (#1608)

Browse Source 
* Add cloudbuild job for signing releases

* Add cosign to github actions

* Update to 1.5.2 to release and sign images
This commit is contained in:
priyawadhwa
2021-03-30 14:29:37 -07:00
committed by GitHub
parent eda57e5400
commit 588fd06564
3 changed files with 65 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/release.yaml
+35 -1
View File
@@ -73,6 +73,20 @@ jobs:
gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}
gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}
gcr.io/kaniko-project/executor:latest
- name: Sign images
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v0.2.0'
run: |
export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}-slim
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}-slim
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:slim
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:latest
build-debug:
env:
@@ -131,6 +145,16 @@ jobs:
gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}-debug
gcr.io/kaniko-project/executor:debug
- name: Sign images
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v0.2.0'
run: |
export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}-debug
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}-debug
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:debug
build-warmer:
env:
GITHUB_SHA: ${{ github.sha }}
@@ -185,4 +209,14 @@ jobs:
tags: |
gcr.io/kaniko-project/warmer:${{ env.GITHUB_SHA }}
gcr.io/kaniko-project/warmer:${{ steps.vars.outputs.tag }}
gcr.io/kaniko-project/warmer:latest
gcr.io/kaniko-project/warmer:latest
- name: Sign images
uses: sigstore/cosign-installer@main
with:
cosign-release: 'v0.2.0'
run: |
export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/warmer:${{ env.GITHUB_SHA }}
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/warmer:${{ steps.vars.outputs.tag }}
cosign sign -kms $KMS_VAL gcr.io/kaniko-project/warmer:latest